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A METHOD FOR FORWARDING BROADCAST PACKETS IN A BRIDGED IP NETWORK 



FIELD OF THE INVENTION 

The invention relates to bridged Internet Protocol (IP) networks or their functional 
equivalent and more particularly to a process for handling IP broadcast data packets which 
reduces or avoids broadcast storms which cause network instability by indiscriminate flooding 
the network with IP broadcast frames. 

BACKGROUND 

In medium to large size bridged IP networks hosts belonging to a substantial number of 
different subnets communicate with hosts belonging to their subnet. In most networks hosts 
belonging to the same subnet are typically connected to a small percentage of the total number of 
ports. This topology characteristic contributes to broadcast storms and/or network instability 
when IP broadcast frames are indiscriminately transmitted. Prior art networks have avoided this 
problem by configuring the network bridges in advance to direct IP broadcast frames to only 
those ports associated with the subnet address associated with the source host of the IP broadcast 
message. 

While this solution works to eliminate the problem described above, it introduces another 
which is just as burdensome. In order to be effective the prior art solution requires intervention 
by a network administrator or the like each time a host is added to the network or when a host is 
moved from one port to another. In other words the solution requires advance configuration 
before the network is established and more significantly reconfiguration each time a change in 
the network takes place. 

SUMMARY OF THE INVENTION 
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The invention contemplates a process for automatically generating a network subnet 
configuration by monitoring IP Address Resolution Protocol (ARP) frames on the network and 
building and maintaining a table including a list of learned subnets, the ports associated with 
each of the learned subnets and a mask associated with each learned subnet for identifying hosts 
5 belonging to the subnet. The process includes the steps set forth below: 

intercepting IP ARP frames; 

extracting the source and destination IP addresses from the IP ARP frame: 
examining the table of learned subnets to determine if the extracted IP addresses belong 
to one or more of the learned subnets; 
10 if neither IP address belongs to a learned subnet defining a new learned IP subnet address 

from the common elements in the prefix of the IP addresses, associating the port over which the 
ARP frame was received with the learned subnet and generating a mask which includes all of the 
£ common elements in the prefixes of both IP addresses; 

|: if only one IP address belongs to a learned subnet, examine the subnet mask and modify it 

1 5 ~ ; if necessary to only include all the common elements in the prefix of both IP addresses and add 

=P the port over which the ARP frame was received to the port list associated with the learned IP 

a subnet if it was not already in the list of associated ports; and, 

if the IP addresses belong to different learned subnets the learned subnets are combined to 

H* form a new learned subnet with a mask which includes both host IP addresses in the learned 
20 p subnet and the port over which the IP ARP frame was received is added to the ports associated 

" with the new learned subnet. 

BRIEF DESCRIPTION OF THE DRAWINGS 

Figure 1 is a block diagram of a network employing the invention; 
Figure 2 is a representation of the information developed by the invention for controlling 
25 the distribution of broadcast frames; 

Figure 3 is a flow chart illustrating the process used for generating the control 
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information; and, 

Figure 4 is a flow diagram of an optional process for splitting learned subnets to achieve 
greater network efficiency. 

DETAILED DESCRIPTION OF THE INVENTION 

IP addresses have a binary format ( xxxx xxxx . xxxx xxxx . xxxx xxxx . xxxx xxxx ). A 
typical binary address 1000 1100 .1111 1100 - 0000 0100 . 0000 0001 can also be expressed in 
decimal format (140 . 252 .4.1). Both formats will be used in the description which follows. In 
some instances the IP address will be expressed in mixed format in order to improve clarity. 

IP address have a subnet and a host part. While the length of the IP address is fixed there 
are, however, no constraints on the length allocated to each individual part. Therefore, without 
advance information it is impossible to determine if two IP addresses are in the same subnet. 
Fortunately, in bridged IP networks, host systems communicate with other host systems only in 
the same subnet. If an ARP frame is received at a port, it is reasonable to assume that common 
prefix bits in both addresses include at a minimum the subnet portion of the IP address. It is 
possible that two hosts may have common prefix bits which extend beyond the actual subnet 
address. A learned subnet as used in the specification and claims differs from a subnet as used in 
the IP protocol since it can and generally will (except for a condition described below) include 
one or more bits of the IP address which are part of the host portion of the IP address. How the 
invention accommodates this discrepancy as more and more hosts belonging to the same subnet 
transmit IP ARP frames will be described below. 

A simplified IP bridged network is illustrated in Figure L The network includes a bridge 
10 having a number of ports Pl-Pn. Token Ring LAN's 12 and 14 are each connected to a 
different port P in the bridge 10. Two host systems A and B are connected to LAN's 12 and 14, 
respectively. While the description identifies Token Ring LAN's other equivalent networks will 
operate in the same manner. In the description which follows one of these hosts will transmit an 
ARP frame addressed to the other. In the first example, neither host IP address will be 
identifiable with an established learned subnet and the bridge will establish a learned subnet 
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which includes all or part of their IP addresses. In the second example, Only one of the host IP 
addresses will be identifiable with an established learned subnet and the bridge will modify the 
previously established learned subnet to include the other host IP address. In a third example the 
source and detination host IP addresses of an ARP frame will be identifiable with different 
5 learned subnets and the bridge will combine the two different learned subnets into a single 
learned subnet which will be identifiable with the IP addresses of both hosts. And in a fourth 
example, an existing learned subnet will be split or reduced. 

Figure 2 illustrates the bridge memory contents for the learned subnet. Each learned 
subnet will have similar information stored in the memory. A first field labeled address includes 
1 0 that part of the IP address which are common to two or more host systems. A second field 

includes a mask which defines all of the common prefix bits in the IP addresses of hosts having 
^ an IP address which conforms to the first field. A third field includes a list of ports associated 
13 with the learned subnet over which broadcast frames originating from hosts belonging to the 
;|) same learned subnet are transmitted. And a fourth field includes data used for splitting or 
1 5 S ; reducing the learned subnet. 

The first three examples set forth below will follow the flow diagram illustrated in Fig 3 
» while the fourth will follow the flow diagram illustrated in Fig 4. In each example host A located 
on LAN 12 is the source address of an ARP frame received at port P! and host B located on LAN 
H ; 14 is the destination address of the ARP frame transmitted by host A. 
20 p If neither host A or B belong to any of the learned subnets in the bridge memory, the 

bridge will create the smallest IP subnet containing both hosts A and B as a new learned subnet. 
In this instance, the forwarding domain for this new subnet is port PI, the port over which the 
ARP frame was received. If the ARP frame had originated in host B, the forwarding domain 
would have been port Pn since this is the port host B is connected to. In all of the cases described 
25 below, the forwarding domain is extended to the port over which the ARP frame was received if 
that port is not already in the forwarding domain. 

In this example we will assume that the IP address of host A is 140.252.4.1 
(140.252.0000.0100. 0000.0001) and the address of host B is 140.252.8.1 
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(140,252.0000.1000,0000.0001). The associated learned subnet created by the bridge is 
1 40.252.0.0 and the mask is 255.255.240.0 (1111.1111.1111.1111.1111 .0000.0000.0000). The 
common part of the prefix of the two IP addresses 140.252.0000 is set to all one's while the 
remainder of the mask (the non common part) is set to all zero's. At this time, the memory 
5 includes the subnet Etddress 140.252.0.0, the mask 255.255.240.0 and the port PI in the 

forwarding domain field. This learned subnet will change over time as more ARP frames are 
received. How this takes place will become apparent from the description below of the remaining 
examples. 

In the second example we will assume that host A belongs to an existing subnet V 
10 (where V stands for a learned subnet stored in the memory of bridge 10 and has the format 

described above) and that host B does not belong to an existing learned subnet. We will consider 
fn the differences when the source of the ARP frame is host A or host B. In this exampe the bridge 
will modify the learned subnet V by expanding it to include host B. The expanded subnet VI is 
ii] structured to include the IP address of host B as well as the IP addresses of the other hosts which 
15 m have contributed to the generation of the learned subnet V. The forwarding domain of the 
t! modified (or replacement) subnet VI is extended from that of subnet V so as to include the port 
s over which the ARP frame was received if that port was not previously included in the 
S i forwarding domain of learned subnet V. If host B was the source of the ARP frame, the 
Si forwarding domain of the subnet V is extended to include port Pn if port Pn was not already 
20 O included in the forwarding domain of the learned subnet. If host A was the source of the ARP 

frame, the forwarding domain of the subnet VI is extended to port PI if that port was not already 
included in the forwarding domain of the learned subnet. 

In this example we will assume that the learned subnet V is characterized by the address 
140.252.0.0 with amask 255.255.248.0 (1111.1111.1111.1111.1111.1000.0000.0000) and the IP 
25 addresses of hosts A and B are 140.252.4.1 (140.252.0000.0100.0000.0001) and 140.252.8.1 

(140,252.0000. 1000.0000.0001), respectively. In this example host A belongs to learned subnet 
V and host B does not belong to any of the learned subnets. Since one of the hosts is sending an 
ARP frame to the other (it makes no difference which host initiated the ARP frame) it implies 
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that both hosts belong to the same subnet. In view of this all that is required in modifying subnet 
V is to modify the mask so that it includes both host A and B and extend the forwarding domain 
of the modified subnet VI to include the port of the source of the ARP frame if that port was not 
already included in the original subnet V. In order to accommodate both hosts A and B the mask 
5 of subnet V is changed to 255.255.240.0 (1111.1111.1111.1111.1111 .0000.0000.0000). 

In a third example hosts A and B belong to different existing learned subnets Va and Vb, 
respectively. In this case the bridge creates a new subnet Vc which is the smallest superset of Va 
and Vb and deletes all of the other subnets that are contained in Vc. The forwarding domain of 
learned subnet Vc is the union of the forwarding domains of learned subnets Va and Vb and the 
10 port over which the ARP frame was received if that port is not already included in one of the 

forwarding domains of learned subnets Va or Vb. Subnet Vc will serve as the associated subnet 
for the given ARP frame. 
yO In this example we will assume that the IP address of host A is 140.252.4.1 

Jj (140.252.0000.0100,0000.0001), that it belongs to learned subnet Va that is characterized by the 
15 J address 140.252.4.0 and the mask 255.255.252.0 (1111.1111.1111.1111.1111.1100.0000.0000). 
# That the address of host B is 140.252.8.1 (140 5 252.0000.1000.0000.0001) 5 that it belongs to 
7" learned subnet Vb that is characterized by the address 140.252.8.0 and the mask 255.255.248.0 
E (1111.1111.1111.1111.1111.1 000.0000.0000). Hosts A and B belong to different learned subnets 
(Va and Vb), however, since host A is sending an ARP frame to host B, it implies that tey are in 
20 p the same subnet and that the learned subnets Va and Vb should be combined into a single learned 
u subnet which accommodates both hosts and includes a forwarding domain which extends to all 
the different ports included in subnets Va and Vb as well as the port over which the ARP frame 
was received if that port was not previously included. In this example the nerged subnet Vc is 
characterized by the address 140.252.0.0 and the mask 255.255.248.0 
25 (1111.1111.1111.1111.11 1 1.1000.0000.0000) which includes host A and host B. 

If no other action is taken the learned subnets created by the method disclosed above will 
eventually gravitate to the actual subnets specified in the IP address. This will occur over time as 
hosts within an actual subnet transmit ARP frames that initiate mergers of learned subnets as 
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described in the third example above. 

However, in certain applications of the invention it may be desirable to split or reduce 
learned subnets as well as merge learned subnets. As learned subnets are merged, there is an 
increase in the forwarding domain of the learned subnet and a consequent increase in the number 
5 of ports included in the forwarding domain of the merged learned subnet. Under certain 

conditions (such as network configuration, host applications ) large learned subnets with large 

forwarding domains can result in reduced network efficiency. As illustrated in the third example, 
the learned subnet Vc has a smaller number of IP address prefix bits included in its mask in order 
to accommodate a larger number of host systems in the learned subnet and it also includes a 
1 0 larger forwarding domain (the sum of the ports included in Va and Vb). Mergers may at times 
occur as a result of transient traffic anomalies. However, once established they continue and 
impact network performance as described above. 
£i In a fourth example described below, a learned subnet will be split or reduced when a 

J; derived split potential for the learned subnet indicates that the learned subnet is a candidate for 
15 : spliting. In this example, hosts A and B belong to the same subnet V. The split or reduction will 
4* not take place until sifter the expiration of a split interval which starts with the creation of a 
J learned subnet and ends after a predetermined delay. The length of the interval is set to 

accommodate the characteristics of the network. As each ARP frame associated with a learned 
H subnet is received, the bridge determines the split potential and replaces a previously determined 
20 h split potential if it is greater than the previously determined split potential. The split potential is 
the difference in the length in bits between the current mask and the mask required to 
accommodate the hosts in the current ARP frame. 

In the example described below it will be assumed that the existing subnet V is 
characterized by the address 140.252.0.0 and has a mask 255.255. 192.0 (1111 1111.1111 
25 1 1 1 1 . 1 1 00 0000.0000 0000). Both hosts A and B engaged in an ARP frame belong to subnet V. 
The address of host A is 140.252.4.1 (140.252.0000 0100.0000 0001) and the address of host B 
140.252.8.1 (140.252.0000 1000.0000 0001). 

The bridge will after receiving the ARP frame described above determine the split 
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potential for subnet V by identifying the common prefix bits in the addresses of hosts A and B. In 
this case there are 20 common prefix bits in the addresses of hosts A and B. A mask based on 
this value exceeds the length of the current mask for subnet V by two bits yielding a split 
potential value of two. If the value exceeds a previously determined split potential value it 
5 replaces the previously determined value. If a new value of the split potential exceeds a 

previously determined value, the characterizing address (140.252.0.0), the mask (255.255.240.0) 
and the port over which the ARP frame was received are stored in memory for future use. At the 
expiration of the split interval, the split potential is examined and if it exceeds zero the subnet V 
assumes the stored characterizing address and mask. At this time the forwarding domain of the 
10 subnet V is modified to include only the stored port over which the ARP frame used to determine 
the split potential was received. 
p« While one basis for splitting or reducing a subnet has been described in detail it will be 

C obvious to those skilled in this art that other network operational factors can be used or included 
5 ;: in the determination of the split potential value. In addition, the reduction in the number of ports 
15^: included in the reduced subnet can be enlarged to take into account past performance in network 
^ traffic. 

While the invention is susceptible to various modifications and alternative forms, specific 
S embodiments have been shown in detail by way of example. It should be obvious to those skilled 
in the art to which the invention pertains that the invention is not limited to the specific 
20 p embodiments descried and illustrated, but on the contrary, the invention is intended to cover all 
w alternatives, modifications and equivalents falling within the spirit and scope of the invention as 
defined by the claims. 
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We claim 



Claim 1 

1 A method for automatically generating a network subnet configuration by monitoring IP 

2 Address Resolution Protocol (ARP) frames on the network and building and maintaining a table 

3 including a list of leeirned subnets, the ports associated with each of the learned subnets and a 

4 mask associated with each learned subnet for identifying hosts belonging to the subnet, said 

5 method including the process steps set forth below: 

6 establishing and maintaining in memory a table of learned IP subnets, each of which 

7 includes a characterizing learned subnet address, a mask for identifying the IP address bits 

8 common to all members of the learned subnet and the forwarding domain of the subnet; 

9 intercepting IP ARP frames; 

1 0 iS8S extracting the from and to IP addresses from an intercepted IP ARP frame: 

1 1 jy examining the table of learned subnets to determine if the extracted IP addresses belong 

12 -*H t° one or more of the learned subnets; 

13 G ; if neither IP address belongs to a learned subnet, defining a new learned IP subnet address 

14 «p for inclusion in the table stored in the memory from the common elements in the prefix of the IP 

1 5 T addresses, including the port over which the ARP frame was received in the forwarding domain 

16 S of the learned subnet and generating a mask which identifies all of the common elements in the 
17 1M : prefixes of both IP addresses. 

° Claim 2 

1 The method set forth in claiml including the following process steps: 

2 if only one IP address belongs to a previously learned subnet, examine the subnet mask 

3 and modify it include all the common elements in the prefix of both IP addresses in the ARP 

4 frame; and, 

5 add the port over which the ARP frame was received to the port list associated with the 

6 learned IP subnet if it was not already in the list of associated ports. 
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1 The method set forth in claim 2 including the following process steps: 

2 if the IP addresses in the received ARP frame belong to different learned subnets: 

3 combine the learned subnets to form a new learned subnet 

4 create a new mask which includes the common prefix IP address elements of both host IP 

5 addresses engaged in the ARP frame; and, 

6 add the port over which the IP ARP frame was received to the combined forwarding 

7 domains of the previously identified subnets if that port was not included therein. 

Claim 4 

1 ^ A method for automatically generating a network subnet configuration by monitoring IP 

2 s i? Address Resolution Protocol (ARP) frames on the network and building and maintaining a table 

3 including a list of learned subnets, the ports associated with each of the learned subnets and a 

4 ^ ; mask associated with each learned subnet for identifying hosts belonging to the subnet, said 

5 4- method including the process steps set forth below: 

6 T maintaining in memory a table of learned IP subnet addresses, each of which includes a 

7 characterizing address, a mask for the IP address bits common to all members of the learned 

8 lr- subnet and the forwarding domain of the subnet; 

9 o intercepting IP ARP frames; 

I o ° extracting the from and to IP addresses from an intercepted IP ARP frame: 

I I examining the table of learned subnets to determine if the extracted IP addresses belong 

12 to one or more of the learned subnets; 

1 3 if neither IP address belongs to a learned subnet, defining a new learned IP subnet address 

14 for inclusion in the table stored in the memory from the common elements in the prefix of the IP 

15 addresses, including the port over which the ARP frame was received in the forwarding domain 

16 of the learned subnet and generating a mask which identifies all of the common elements in the 

1 7 prefixes of both IP addresses; 
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1 8 if only one IP address belongs to a learned subnet, examine the subnet mask and modify it 

1 9 if necessary to only include all the common elements in the prefix of both IP addresses and add 

20 the port over which the ARP frame was received to the port list associated with the learned IP 

21 subnet if it was not already in the list of associated ports; and, 

22 if the IP addresses belong to different learned subnets the learned subnets are combined to 

23 form a new learned subnet with a mask which includes both host IP addresses in the learned 

24 subnet and add the port over which the IP ARP frame was received to the combined forwarding 

25 domains of the previously identified subnets if that port was not included therein. 

Claim 5 

1 The method set forth in any one of claims 1 -4 including the following process steps: 

2 ^ upon establishing a new learned subnet starting a split interval timer; 

3 Ci upon receipt of each IRP frame belonging to the subnet generating a split potential value 

4 *?{ for the learned subnet which is related to the number of common bits in the from and to IP 

5 'i : addresses in the received ARP frame and replacing a previously generated split potential value if 

6 £ the current value exceed a previously generated value; and, 

7 7 at the expiration of the split interval, splitting the learned subnet if the split potential 

8 ;S i exceeds a predetermined value. 

r ] Claim 6 

1 ^ The method set forth in claim 5 in which the forwarding domain of the split learned 

2 subnet includes the port over which the ARP frame causing the last split potential was received. 
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A METHOD FOR FORWARDING BROADCAST PACKETS IN A BRIDGED IP NETWORK 



ABSTRACT 



A method for automatically generating a network subnet configuration, monitors IP 
Address Resolution Protocol (ARP) frames on the network and builds and maintains a table 
which includes a list of learned subnets, the ports or forwarding domain associated with each of 
the learned subnets and a mask associated with each learned subnet for identifying hosts 
belonging to the subnet. The from and to IP addresses from intercepted IP ARP frames are 
examined to determine if the IP addresses belong in any of the learned subnets. If neither IP 
address belongs to an existing learned subnet a new learned subnet is established. The subnet 
includes the common prefix bits of both IP addresses, a mask identifying those bits and the port 
over which the ARP frame was received. If only one IP address belong to a learned subnet, the 
mask associated with that subnet is modified to include the common prefix bits of both IP 
addresses and the forwarding domain is adjusted. If the two IP addresses belong to different 
learned subnets, the two subnets are combined. 
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